
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/F6093276B5E511F18DE38F1E4B11F970.roa
File: F6093276B5E511F18DE38F1E4B11F970.roa (raw, json)
Hash identifier: ucPChgB8e/pHTEgSRPnZ6dB6WW9+obb5kZoOkZ5Wni0=
Subject key identifier: 96:65:28:2B:BE:6C:22:3D:8F:24:D5:7D:C3:43:5F:9F:54:50:20:79
Certificate issuer: /CN=A91925D1/serialNumber=7E5B39E7549DC4F94AE2C5408EA8911B8F204FE4
Certificate serial: 04
Authority key identifier: 7E:5B:39:E7:54:9D:C4:F9:4A:E2:C5:40:8E:A8:91:1B:8F:20:4F:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fls551SdxPlK4sVAjqiRG48gT-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/F6093276B5E511F18DE38F1E4B11F970.roa
Signing time: Mon 21 Sep 2026 18:04:11 +0000
ROA not before: Mon 21 Sep 2026 18:04:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154553
IP address blocks: 163.128.74.0/23 maxlen: 24
2001:df6:d5c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.crl
rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fls551SdxPlK4sVAjqiRG48gT-Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 09:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91925D1, serialNumber=7E5B39E7549DC4F94AE2C5408EA8911B8F204FE4
Validity
Not Before: Sep 21 18:04:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab1719a-85c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:fd:67:9f:92:2f:e8:4a:b0:11:b2:b7:b6:
fc:dc:b2:bb:43:96:2f:31:37:77:95:04:85:0e:00:
9b:1d:5b:df:2f:96:59:bc:a8:46:1c:01:4b:ba:4b:
87:d3:b8:4a:ef:3b:48:9b:40:41:cb:27:8e:8e:c3:
ef:fd:47:c6:82:dc:75:bb:d1:bd:eb:25:a0:b3:85:
9c:43:96:5a:e6:71:06:77:ca:1c:e6:d2:cc:2b:b6:
e2:41:f6:21:da:e3:2b:35:b8:f6:5e:56:85:58:a2:
60:97:b5:fd:ca:19:c4:79:7a:a3:f2:95:74:d3:29:
c0:47:40:3c:7a:3d:65:f6:d0:cc:b5:46:f9:e9:78:
6b:d9:42:b7:87:30:d1:ab:f8:35:b4:fc:72:65:15:
05:20:1b:2b:cf:8d:af:f6:04:05:cf:a5:21:4b:1a:
48:86:7c:18:83:1b:4e:37:40:df:ee:dd:26:2e:29:
59:63:3d:cf:db:47:5d:4c:50:ff:fc:63:22:37:0b:
f0:12:04:47:c6:02:c6:49:34:9a:37:c6:7e:ab:9f:
0b:6b:a1:1a:a6:a0:9e:0b:8e:7f:5a:f8:a2:14:88:
23:84:5d:61:d1:e2:c8:b0:be:46:34:fc:19:a2:af:
a9:39:8e:c5:3b:74:bd:1f:87:7a:1a:da:56:04:05:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:28:2B:BE:6C:22:3D:8F:24:D5:7D:C3:43:5F:9F:54:50:20:79
X509v3 Authority Key Identifier:
keyid:7E:5B:39:E7:54:9D:C4:F9:4A:E2:C5:40:8E:A8:91:1B:8F:20:4F:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fls551SdxPlK4sVAjqiRG48gT-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/F6093276B5E511F18DE38F1E4B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.74.0/23
IPv6:
2001:df6:d5c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:e8:be:7e:08:8e:0a:b8:ef:43:06:c8:5d:1a:cc:9a:8c:a9:
46:49:38:f6:8e:7b:1f:9b:d9:95:46:fb:a4:bd:78:e3:55:04:
53:81:4c:78:dc:3a:26:88:e3:56:09:36:2f:65:19:6d:b5:33:
df:40:31:4a:eb:e9:fa:db:21:03:36:45:be:c4:f0:9d:49:69:
e8:ed:b2:4e:5c:45:57:4e:55:97:b6:be:38:95:ed:86:86:a2:
62:33:9d:be:ba:f0:e3:3a:8c:d0:11:2a:4e:cc:2e:f7:3d:3f:
dd:43:39:d1:ed:a0:79:06:49:71:1f:34:43:3c:12:08:ce:30:
ba:a7:94:5b:e7:b7:cd:d0:ec:04:f3:fa:fa:81:80:7b:94:fc:
ee:c2:51:da:4b:99:06:ef:e4:27:fc:a1:db:f6:bf:65:46:b9:
bc:08:b1:6a:6a:97:84:f8:0c:fb:63:0c:38:9b:20:fe:59:60:
86:65:50:7b:ed:15:ee:a1:6f:d2:51:a8:79:19:40:ac:e4:b5:
ee:ff:41:2a:4e:15:48:ae:cc:87:cd:a7:30:d2:f8:8b:1a:3d:
02:da:55:c9:9f:5c:1d:ca:67:b8:15:70:55:a8:5a:02:d5:f2:
8a:a0:69:64:d9:b6:ab:ff:41:a9:ec:1b:fd:b5:49:c6:c4:df:
2a:d8:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:51:26 2026 by rpki-client